What are the required steps to permanently remove a member from a cluster?
You may want to clarify, an indexer cluster (single site / multi-site) or a search head cluster?
Sorry - single-site indexer cluster.
To remove an indexer from your cluster permanently use:
splunk offline --enforce-counts
You can watch the progress on the indexer clustering dashboard.
See this answer: http://answers.splunk.com/answers/104575/remove-peer-from-cluster-then-re-add.html
The Splunk Doc: http://docs.splunk.com/Documentation/Splunk/6.2.3/Indexer/Takeapeeroffline
View solution in original post